maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter.Referenceshttp://secunia.com/advisories/23270http://www.securityfocus.com/bid/21526https://www.exploit-db.com/exploits/2903https://exchange.xforce.ibmcloud.com/vulnerabilities/30850
